Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
Date:   Mon, 21 Feb 2022 09:14:45 +0100 (CET)
From:   Jiri Kosina <jikos@kernel.org>
To:     Pavel Skripkin <paskripkin@gmail.com>
cc:     syzbot <syzbot+35eebd505e97d315d01c@syzkaller.appspotmail.com>,
        alexandre.torgue@foss.st.com, benjamin.tissoires@redhat.com,
        linux-arm-kernel@lists.infradead.org, linux-input@vger.kernel.org,
        linux-kernel@vger.kernel.org,
        linux-stm32@st-md-mailman.stormreply.com,
        mcoquelin.stm32@gmail.com, syzkaller-bugs@googlegroups.com
Subject: Re: [syzbot] KASAN: slab-out-of-bounds Read in thrustmaster_probe
In-Reply-To: <43992c7a-c8e7-29a6-d0f0-f69abccd62a1@gmail.com>
Message-ID: <nycvar.YFH.7.76.2202210914220.11721@cbobk.fhfr.pm>
References: <000000000000d181a205d874c066@google.com> <cd08c05f-f648-071f-d8f5-0a022cd35b7b@gmail.com> <nycvar.YFH.7.76.2202210900420.11721@cbobk.fhfr.pm> <43992c7a-c8e7-29a6-d0f0-f69abccd62a1@gmail.com>
User-Agent: Alpine 2.21 (LSU 202 2017-01-01)
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Precedence: bulk

On Mon, 21 Feb 2022, Pavel Skripkin wrote:

> >> Looks like missing check for malicious device. Need to check number of
> >> endpoints before accessing endpoints array
> >> 
> >> 
> >> #syz test
> >> git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git master
> > 
> > Thanks Pavel. Could you please send the patch with proper changelog and
> > SOB my way?
> > 
> 
> I've already posted the patch :) You can find it here [1] (you are in CC of
> course)
> 
> 
> [1] https://lore.kernel.org/all/20220220160114.26882-1-paskripkin@gmail.com/

Hmm, for some reason I don't see it in my inbox, but I'll grab it from the 
ML and apply.

Thanks,

-- 
Jiri Kosina
SUSE Labs